pub fn classify_installed_profile(
read: Result<Vec<u8>, Error>,
) -> InstalledProfileStateExpand description
Classifies a read of SEALED_APPARMOR_PROFILE_PATH against the shipped digest.
Takes the already-performed read rather than the path, so all four outcomes are unit-testable with no filesystem mutation and no privilege.